-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 07 Mar 2023 18:12:37 -0500
Source: chromium
Architecture: source
Version: 111.0.5563.64-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (111.0.5563.64-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream stable release.
- CVE-2023-1213: Use after free in Swiftshader.
Reported by Jaehun Jeong(@n3sk) of Theori.
- CVE-2023-1214: Type Confusion in V8.
Reported by Man Yue Mo of GitHub Security Lab.
- CVE-2023-1215: Type Confusion in CSS. Reported by Anonymous.
- CVE-2023-1216: Use after free in DevTools.
Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team.
- CVE-2023-1217: Stack buffer overflow in Crash reporting.
Reported by sunburst of Ant Group Tianqiong Security Lab.
- CVE-2023-1218: Use after free in WebRTC. Reported by Anonymous.
- CVE-2023-1219: Heap buffer overflow in Metrics.
Reported by Sergei Glazunov of Google Project Zero.
- CVE-2023-1220: Heap buffer overflow in UMA.
Reported by Sergei Glazunov of Google Project Zero.
- CVE-2023-1221: Insufficient policy enforcement in Extensions API.
Reported by Ahmed ElMasry.
- CVE-2023-1222: Heap buffer overflow in Web Audio API.
Reported by Cassidy Kim(@cassidy6564).
- CVE-2023-1223: Insufficient policy enforcement in Autofill.
Reported by Ahmed ElMasry.
- CVE-2023-1224: Insufficient policy enforcement in Web Payments API.
Reported by Thomas Orlita.
- CVE-2023-1225: Insufficient policy enforcement in Navigation.
Reported by Roberto Ffrench-Davis @Lihaft.
- CVE-2023-1226: Insufficient policy enforcement in Web Payments API.
Reported by Anonymous.
- CVE-2023-1227: Use after free in Core. Reported by @ginggilBesel.
- CVE-2023-1228: Insufficient policy enforcement in Intents.
Reported by Axel Chong.
- CVE-2023-1229: Inappropriate implementation in Permission prompts.
Reported by Thomas Orlita.
- CVE-2023-1230: Inappropriate implementation in WebApp Installs.
Reported by Axel Chong.
- CVE-2023-1231: Inappropriate implementation in Autofill.
Reported by Yan Zhu, Brave.
- CVE-2023-1232: Insufficient policy enforcement in Resource Timing.
Reported by Sohom Datta.
- CVE-2023-1233: Insufficient policy enforcement in Resource Timing.
Reported by Soroush Karami.
- CVE-2023-1234: Inappropriate implementation in Intents.
Reported by Axel Chong.
- CVE-2023-1235: Type Confusion in DevTools.
Reported by raven at KunLun lab.
- CVE-2023-1236: Inappropriate implementation in Internals.
Reported by Alesandro Ortiz.
* Document upcoming security support in README.Debian.security.
* Document switching the default search engine in README.debian.
* d/patches:
- upstream/clamp.patch: drop, merged upstream.
- upstream/pwman-const.patch: drop, merged upstream.
- upstream/move-stack-to-isolate.patch: drop, merged upstream.
- upstream/blink-dbl-float.patch: drop, merged upstream.
- upstream/v4l2-fix.patch: drop, merged upstream.
- disable/catapult.patch: refresh & remove unnecessary android bits.
- disable/google-api-warning.patch: refresh.
.
[ Timothy Pearson ]
* d/patches:
- ppc64le/third_party/0005-third_party-dav1d-crash-fix.patch: drop,
merged upstream
- ppc64le/workarounds/HACK-debian-clang-disable-skia-musttail.patch:
skia musttail is back in upstream, disable on ppc64le due to
contining Clang bugs
- ppc64le: refresh libaom configuration
Checksums-Sha1:
7c10e799c64fcaa916e196805b9474b36fa654a1 3684 chromium_111.0.5563.64-1.dsc
d8c14fdb7853f61e157a4c87427dae124a6c1563 653798792 chromium_111.0.5563.64.orig.tar.xz
67e142ea3dd7b548815566acd15e260379dfbbb3 297832 chromium_111.0.5563.64-1.debian.tar.xz
8f809232b8f7758ee0f6c80f986e75eabfa822bc 20577 chromium_111.0.5563.64-1_source.buildinfo
Checksums-Sha256:
3afa8d54ff575630a81d7cb187be66c0436a730c1097e213bd0358257200b819 3684 chromium_111.0.5563.64-1.dsc
68dc1f957c93a199571acea663a68ce59f8c028b522d010639f657d6442d154d 653798792 chromium_111.0.5563.64.orig.tar.xz
397324205f8a4d5bc955976ba32106e6b6fed1a94e18d36e04d20a794b39c90d 297832 chromium_111.0.5563.64-1.debian.tar.xz
5e210d4a2fca019a275294c0c94c46b32326bc34b68d8e134d87b5414a342d3f 20577 chromium_111.0.5563.64-1_source.buildinfo
Files:
5ac23566614cd1d2d2a0a0b71cf787ee 3684 web optional chromium_111.0.5563.64-1.dsc
caa4104f8f64bcdb1a6fa63531cee231 653798792 web optional chromium_111.0.5563.64.orig.tar.xz
7d5e2d399b6efdd51e3675c6b8440f40 297832 web optional chromium_111.0.5563.64-1.debian.tar.xz
a208d38aaf8cb8e00cbc4d38e84d663a 20577 web optional chromium_111.0.5563.64-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmQHy20UHGRpbGluZ2Vy
QGRlYmlhbi5vcmcACgkQZF0CR8Nudjc5hBAAk6z36Fm7f+4zFNgNzhS8XAWTT9rH
vhpw3i8Q34bwu+UV2kp1KIioSNVZbFpQn6E9T0+rhhj4pf8mWqwOAjc1RlarS8Fs
DbR7IC3CJmi+NjlzUHg64hNdefdaEhwM6LNEbHl6a56i9b5RZLFHnm1z9IWi5E2p
Fk1MBAqBWsm7WXrema5ZB4nfu7PMNVS/kDAvHWKjc9oSD52t8GGgfZysXbxM6mDv
2TpsgH/aqDzkBWnIjYxWxgMjd07QbJW0nV1dyx0RykB2pUaXqwQm/SjCiTodxRd7
ANdzbwQnat9BWlqcaFES9bLrl5mYSrjafB5vPGgm/c6FbH63HJRm1XYKDpDRmJ2B
mCJwv9hetrqP7zkd2HE5a6CyqQUuyYYo0uwbZCJ6F6qU6p19bUv1U0PLpdX+v2oU
GGbPfmxUVdhWSP5SijgMMP/Wl3PNzxcO0rIxgSufX70DjH3dkUTKS6IQUhKn6Ony
TbEvcU4qc+fuDoB65ROSQMeV8o4Lcr+0Jdva9hGVZZatANjxYyZ5VpJRySrnt0ub
bwavqnnUW2cNpjdv/6zmzkcuBcgshO5Q8Q7uHIaZL2hrTpbuOGY67XWSfj3kjjbn
obegA7wlXYWaQxSxnJRkGhC7xCZYVqLkQMWPN8HVweBbR2hgJ65WPrztn4vvivrx
zww2F/0uQzJnDfc=
=OAZZ
-----END PGP SIGNATURE-----
